Comments (14)
jeremylong
commented on July 26, 2024
4
@mdjnewman I'm trying to solve one more unrelated issue, which affects newer versions of gradle. The hope is that this weekend I can push a new release.
from dependency-check-gradle.
jeremylong
commented on July 26, 2024
2
Sorry for the delay - but 2.1.1 has been released.
from dependency-check-gradle.
jeremylong
commented on July 26, 2024
Any chance you can provide a little more detail by running gradlew dependencyCheckAnalyze --debug?
from dependency-check-gradle.
alixwar
commented on July 26, 2024
Here is the tail of the log:
09:55:26.319 [DEBUG] [org.owasp.dependencycheck.Engine] Path passed to scanFile(File) is not a file: C:\Users\Alix\.gradle\caches\modules-2\files-2.1\se.emilsjolander\stickylistheaders\2.7.0\a24a5784eb5f9aa7f71578edd6bff3d6a40c650d\stickylistheaders-2.7.0.aar. Skipping the file.
09:55:26.319 [DEBUG] [org.gradle.api.internal.tasks.execution.ResolveTaskArtifactStateTaskExecuter] Removed task artifact state for {} from context.
09:55:26.319 [DEBUG] [org.gradle.api.internal.tasks.execution.ExecuteAtMostOnceTaskExecuter] Finished executing task ':application:dependencyCheckAnalyze'
09:55:26.319 [LIFECYCLE] [class org.gradle.internal.buildevents.TaskExecutionLogger] :application:dependencyCheckAnalyze FAILED
09:55:26.320 [INFO] [org.gradle.execution.taskgraph.AbstractTaskPlanExecutor] :application:dependencyCheckAnalyze (Thread[Daemon worker Thread 2,5,main]) completed. Took 0.026 secs.
09:55:26.320 [DEBUG] [org.gradle.internal.operations.DefaultBuildOperationWorkerRegistry] Worker root.1 completed (0 in use)
09:55:26.320 [DEBUG] [org.gradle.execution.taskgraph.AbstractTaskPlanExecutor] Task worker [Thread[Daemon worker Thread 2,5,main]] finished, busy: 0.026 secs, idle: 0.0 secs
09:55:26.320 [ERROR] [org.gradle.internal.buildevents.BuildExceptionReporter]
09:55:26.321 [ERROR] [org.gradle.internal.buildevents.BuildExceptionReporter] FAILURE: Build failed with an exception.
09:55:26.321 [ERROR] [org.gradle.internal.buildevents.BuildExceptionReporter]
09:55:26.321 [ERROR] [org.gradle.internal.buildevents.BuildExceptionReporter] * What went wrong:
09:55:26.321 [ERROR] [org.gradle.internal.buildevents.BuildExceptionReporter] Execution failed for task ':application:dependencyCheckAnalyze'.
09:55:26.321 [ERROR] [org.gradle.internal.buildevents.BuildExceptionReporter] > Cannot invoke method forEach() on null object
09:55:26.321 [ERROR] [org.gradle.internal.buildevents.BuildExceptionReporter]
09:55:26.321 [ERROR] [org.gradle.internal.buildevents.BuildExceptionReporter] * Try:
09:55:26.321 [ERROR] [org.gradle.internal.buildevents.BuildExceptionReporter] Run with --stacktrace option to get the stack trace.
09:55:26.321 [LIFECYCLE] [org.gradle.internal.buildevents.BuildResultLogger]
09:55:26.321 [LIFECYCLE] [org.gradle.internal.buildevents.BuildResultLogger] BUILD FAILED
from dependency-check-gradle.
alixwar
commented on July 26, 2024
And here is the stacktrace:
* Exception is:
org.gradle.api.tasks.TaskExecutionException: Execution failed for task ':application:dependencyCheckAnalyze'.
at org.gradle.api.internal.tasks.execution.ExecuteActionsTaskExecuter.executeActions(ExecuteActionsTaskExecuter.java:84)
at org.gradle.api.internal.tasks.execution.ExecuteActionsTaskExecuter.execute(ExecuteActionsTaskExecuter.java:55)
at org.gradle.api.internal.tasks.execution.SkipUpToDateTaskExecuter.execute(SkipUpToDateTaskExecuter.java:62)
at org.gradle.api.internal.tasks.execution.ValidatingTaskExecuter.execute(ValidatingTaskExecuter.java:58)
at org.gradle.api.internal.tasks.execution.SkipEmptySourceFilesTaskExecuter.execute(SkipEmptySourceFilesTaskExecuter.java:88)
at org.gradle.api.internal.tasks.execution.ResolveTaskArtifactStateTaskExecuter.execute(ResolveTaskArtifactStateTaskExecuter.java:46)
at org.gradle.api.internal.tasks.execution.SkipTaskWithNoActionsExecuter.execute(SkipTaskWithNoActionsExecuter.java:51)
at org.gradle.api.internal.tasks.execution.SkipOnlyIfTaskExecuter.execute(SkipOnlyIfTaskExecuter.java:54)
at org.gradle.api.internal.tasks.execution.ExecuteAtMostOnceTaskExecuter.execute(ExecuteAtMostOnceTaskExecuter.java:43)
at org.gradle.api.internal.tasks.execution.CatchExceptionTaskExecuter.execute(CatchExceptionTaskExecuter.java:34)
at org.gradle.execution.taskgraph.DefaultTaskGraphExecuter$EventFiringTaskWorker$1.execute(DefaultTaskGraphExecuter.java:236)
at org.gradle.execution.taskgraph.DefaultTaskGraphExecuter$EventFiringTaskWorker$1.execute(DefaultTaskGraphExecuter.java:228)
at org.gradle.internal.Transformers$4.transform(Transformers.java:169)
at org.gradle.internal.progress.DefaultBuildOperationExecutor.run(DefaultBuildOperationExecutor.java:106)
at org.gradle.internal.progress.DefaultBuildOperationExecutor.run(DefaultBuildOperationExecutor.java:61)
at org.gradle.execution.taskgraph.DefaultTaskGraphExecuter$EventFiringTaskWorker.execute(DefaultTaskGraphExecuter.java:228)
at org.gradle.execution.taskgraph.DefaultTaskGraphExecuter$EventFiringTaskWorker.execute(DefaultTaskGraphExecuter.java:215)
at org.gradle.execution.taskgraph.AbstractTaskPlanExecutor$TaskExecutorWorker.processTask(AbstractTaskPlanExecutor.java:77)
at org.gradle.execution.taskgraph.AbstractTaskPlanExecutor$TaskExecutorWorker.run(AbstractTaskPlanExecutor.java:58)
at org.gradle.execution.taskgraph.DefaultTaskPlanExecutor.process(DefaultTaskPlanExecutor.java:32)
at org.gradle.execution.taskgraph.DefaultTaskGraphExecuter.execute(DefaultTaskGraphExecuter.java:113)
at org.gradle.execution.SelectedTaskExecutionAction.execute(SelectedTaskExecutionAction.java:37)
at org.gradle.execution.DefaultBuildExecuter.execute(DefaultBuildExecuter.java:37)
at org.gradle.execution.DefaultBuildExecuter.access$000(DefaultBuildExecuter.java:23)
at org.gradle.execution.DefaultBuildExecuter$1.proceed(DefaultBuildExecuter.java:43)
at org.gradle.execution.DryRunBuildExecutionAction.execute(DryRunBuildExecutionAction.java:32)
at org.gradle.execution.DefaultBuildExecuter.execute(DefaultBuildExecuter.java:37)
at org.gradle.execution.DefaultBuildExecuter.execute(DefaultBuildExecuter.java:30)
at org.gradle.initialization.DefaultGradleLauncher$3.execute(DefaultGradleLauncher.java:196)
at org.gradle.initialization.DefaultGradleLauncher$3.execute(DefaultGradleLauncher.java:193)
at org.gradle.internal.Transformers$4.transform(Transformers.java:169)
at org.gradle.internal.progress.DefaultBuildOperationExecutor.run(DefaultBuildOperationExecutor.java:106)
at org.gradle.internal.progress.DefaultBuildOperationExecutor.run(DefaultBuildOperationExecutor.java:56)
at org.gradle.initialization.DefaultGradleLauncher.doBuildStages(DefaultGradleLauncher.java:193)
at org.gradle.initialization.DefaultGradleLauncher.doBuild(DefaultGradleLauncher.java:119)
at org.gradle.initialization.DefaultGradleLauncher.run(DefaultGradleLauncher.java:102)
at org.gradle.launcher.exec.GradleBuildController.run(GradleBuildController.java:71)
at org.gradle.tooling.internal.provider.ExecuteBuildActionRunner.run(ExecuteBuildActionRunner.java:28)
at org.gradle.launcher.exec.ChainingBuildActionRunner.run(ChainingBuildActionRunner.java:35)
at org.gradle.launcher.exec.InProcessBuildActionExecuter.execute(InProcessBuildActionExecuter.java:41)
at org.gradle.launcher.exec.InProcessBuildActionExecuter.execute(InProcessBuildActionExecuter.java:26)
at org.gradle.tooling.internal.provider.ContinuousBuildActionExecuter.execute(ContinuousBuildActionExecuter.java:75)
at org.gradle.tooling.internal.provider.ContinuousBuildActionExecuter.execute(ContinuousBuildActionExecuter.java:49)
at org.gradle.tooling.internal.provider.ServicesSetupBuildActionExecuter.execute(ServicesSetupBuildActionExecuter.java:44)
at org.gradle.tooling.internal.provider.ServicesSetupBuildActionExecuter.execute(ServicesSetupBuildActionExecuter.java:29)
at org.gradle.launcher.daemon.server.exec.ExecuteBuild.doBuild(ExecuteBuild.java:67)
at org.gradle.launcher.daemon.server.exec.BuildCommandOnly.execute(BuildCommandOnly.java:36)
at org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:120)
at org.gradle.launcher.daemon.server.exec.WatchForDisconnection.execute(WatchForDisconnection.java:47)
at org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:120)
at org.gradle.launcher.daemon.server.exec.ResetDeprecationLogger.execute(ResetDeprecationLogger.java:26)
at org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:120)
at org.gradle.launcher.daemon.server.exec.RequestStopIfSingleUsedDaemon.execute(RequestStopIfSingleUsedDaemon.java:34)
at org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:120)
at org.gradle.launcher.daemon.server.exec.ForwardClientInput$2.call(ForwardClientInput.java:74)
at org.gradle.launcher.daemon.server.exec.ForwardClientInput$2.call(ForwardClientInput.java:72)
at org.gradle.util.Swapper.swap(Swapper.java:38)
at org.gradle.launcher.daemon.server.exec.ForwardClientInput.execute(ForwardClientInput.java:72)
at org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:120)
at org.gradle.launcher.daemon.server.exec.LogAndCheckHealth.execute(LogAndCheckHealth.java:55)
at org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:120)
at org.gradle.launcher.daemon.server.exec.LogToClient.doBuild(LogToClient.java:60)
at org.gradle.launcher.daemon.server.exec.BuildCommandOnly.execute(BuildCommandOnly.java:36)
at org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:120)
at org.gradle.launcher.daemon.server.exec.EstablishBuildEnvironment.doBuild(EstablishBuildEnvironment.java:72)
at org.gradle.launcher.daemon.server.exec.BuildCommandOnly.execute(BuildCommandOnly.java:36)
at org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:120)
at org.gradle.launcher.daemon.server.exec.StartBuildOrRespondWithBusy$1.run(StartBuildOrRespondWithBusy.java:50)
at org.gradle.launcher.daemon.server.DaemonStateCoordinator$1.run(DaemonStateCoordinator.java:297)
at org.gradle.internal.concurrent.ExecutorPolicy$CatchAndRecordFailures.onExecute(ExecutorPolicy.java:54)
at org.gradle.internal.concurrent.StoppableExecutorImpl$1.run(StoppableExecutorImpl.java:40)
Caused by: java.lang.NullPointerException: Cannot invoke method forEach() on null object
at org.owasp.dependencycheck.gradle.tasks.AbstractAnalyze.addInfoToDependencies(AbstractAnalyze.groovy:387)
at org.owasp.dependencycheck.gradle.tasks.Analyze$_scanDependencies_closure2$_closure3.doCall(Analyze.groovy:60)
at org.owasp.dependencycheck.gradle.tasks.Analyze$_scanDependencies_closure2.doCall(Analyze.groovy:58)
at org.owasp.dependencycheck.gradle.tasks.Analyze.scanDependencies(Analyze.groovy:55)
at org.owasp.dependencycheck.gradle.tasks.Analyze$scanDependencies.callCurrent(Unknown Source)
at org.owasp.dependencycheck.gradle.tasks.AbstractAnalyze.analyze(AbstractAnalyze.groovy:73)
at org.gradle.internal.reflect.JavaMethod.invoke(JavaMethod.java:73)
at org.gradle.api.internal.project.taskfactory.DefaultTaskClassInfoStore$StandardTaskAction.doExecute(DefaultTaskClassInfoStore.java:141)
at org.gradle.api.internal.project.taskfactory.DefaultTaskClassInfoStore$StandardTaskAction.execute(DefaultTaskClassInfoStore.java:134)
at org.gradle.api.internal.project.taskfactory.DefaultTaskClassInfoStore$StandardTaskAction.execute(DefaultTaskClassInfoStore.java:123)
at org.gradle.api.internal.AbstractTask$TaskActionWrapper.execute(AbstractTask.java:632)
at org.gradle.api.internal.AbstractTask$TaskActionWrapper.execute(AbstractTask.java:615)
at org.gradle.api.internal.tasks.execution.ExecuteActionsTaskExecuter.executeAction(ExecuteActionsTaskExecuter.java:95)
at org.gradle.api.internal.tasks.execution.ExecuteActionsTaskExecuter.executeActions(ExecuteActionsTaskExecuter.java:76)
... 70 more
from dependency-check-gradle.
jamesots
commented on July 26, 2024
This change to the plugin would appear to prevent the NPE, although I don't know the code well enough to know if it's actually correct:
diff --git a/src/main/groovy/org/owasp/dependencycheck/gradle/tasks/AbstractAnalyze.groovy b/src/main/groovy/org/owasp/dependencycheck/gradle/tasks/AbstractAnalyze.groovy
index 24e45d3..0453e4b 100644
--- a/src/main/groovy/org/owasp/dependencycheck/gradle/tasks/AbstractAnalyze.groovy
+++ b/src/main/groovy/org/owasp/dependencycheck/gradle/tasks/AbstractAnalyze.groovy
@@ -383,7 +383,7 @@ abstract class AbstractAnalyze extends DefaultTask {
null, Confidence.HIGHEST)
}
d.addProjectReference(configurationName)
- } else {
+ } else if (deps != null) {
deps.forEach { it.addProjectReference(configurationName) }
}
}from dependency-check-gradle.
mdjnewman
commented on July 26, 2024
Thanks for the quick fix @jeremylong!
Just ran into this and realised it's already fixed :)
When's the next release being cut?
from dependency-check-gradle.
thenano
commented on July 26, 2024
@jeremylong thanks very much for fixing this. If you need anything to release the new version I'm happy to help.
from dependency-check-gradle.
vanderaj
commented on July 26, 2024
It's not yet in the repos - how I can get it as this bug has hit me, too.
from dependency-check-gradle.
jeremylong
commented on July 26, 2024
I apologize - I did not click the release button in nexus. It should be available shortly.
from dependency-check-gradle.
jeremylong
commented on July 26, 2024
Also, the gradle plugin portal has the new version as "pending approval"; so we are waiting on them.
from dependency-check-gradle.
mdjnewman
commented on July 26, 2024
Thanks @jeremylong ! :) :)
from dependency-check-gradle.
emartynov
commented on July 26, 2024
Wow, it is taking super long. What is stopping it from maven central? Maybe jcenter?
from dependency-check-gradle.
lock
commented on July 26, 2024
This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.
from dependency-check-gradle.
Related Issues (20)
- default data directory in v9
- Database Compability Issue when using Spring Boot 3.2.0
- Sources link on GPP doesn't point to a URL HOT 2
- How to configure the NVD API key? HOT 1
- Redacting the HTML Report HOT 1
- Can props from build.gradle.kts be overwritten with -D or -P parameter? HOT 3
- Lots of NVD API request failures HOT 1
- Error when trying to build image with jib. HOT 3
- java.lang.ClassNotFoundException: org.apache.commons.codec.Charsets with 9.0.10 HOT 6
- Build never finishes with AGP 8.3 HOT 1
- Possibly conflicting information regarding gradle subprojects HOT 6
- Gradle Version Used in 9.1.0 HOT 6
- Please check contains "test" for `skipTestGroups`, not starts with HOT 5
- Plugin make project build fail HOT 5
- Add NVD API key as a parameter HOT 1
- Kotlin 2.0 and test groups problem HOT 1
- Malformed JSON report HOT 4
- dependencyCheckAggregate Analysis failed
- Add configurability of NVD API resultsPerPage to the gradle plugin
- Kotlin 2.0 dependencyCheckAggregate is not working
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dependency-check-gradle.